Vulnerabilidades exploráveis hoje
413,215na visualização atual
Score único que combina CVSS, presença no KEV e EPSS. Cada CVE com sua própria ficha — timeline da publicação até a exploração ativa.
No catálogo KEV1,779
Novos KEV · 24H0
Exploit Today ≥ 701,707
Distribuição · última janela
- Crítica5,602
- Alta22,090
- Média20,599
- Baixa2,123
Filtros
Janela
Severidade
Filtros
CVECVSSEPSSKEVRExploitTítuloMod.
CVE-2025-343929.8 CRÍ98.0%
——29Barracuda Service Center, as implemented in the RMM solution, in versions prior to 2025.1.1, does not verify the URL defined in an attacker-controlled WSDL that is later loaded by the application. This can lead to arbitrary file write and remote code execution via webshell upload.28dCVE-2006-3591—98.0%
——29——CVE-2017-2805—98.0%
——29——CVE-2017-0015—98.0%
——29——CVE-2009-0099—98.0%
——29——CVE-2015-2998—98.0%
——29——CVE-2011-3412—98.0%
——29——CVE-2018-8372—98.0%
——29——CVE-2026-273058.6 ALT98.0%
——29ColdFusion versions 2023.18, 2025.6 and earlier are affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could lead to arbitrary file system read. An attacker could exploit this vulnerability to access sensitive files and directories outside the intended access scope. Exploitation of this issue does not require user interaction.76dCVE-2016-32345.5 MÉD98.0%
——29Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Office Compatibility Pack SP3, Word Viewer, Word Automation Services on SharePoint Server 2010 SP2, Word Automation Services on SharePoint Server 2013 SP1, Office Web Apps 2010 SP2, and Office Web Apps Server 2013 SP1 allow remote attackers to obtain sensitive information from process memory via a crafted Office document, aka "Microsoft Office Information Disclosure Vulnerability."27dCVE-2023-5684—98.0%
——29——CVE-2020-17453—98.0%
——29——CVE-2018-17057—98.0%
——29——CVE-2014-0098—98.0%
——29——CVE-2022-38621—98.0%
——29——CVE-2010-4598—98.0%
——29——CVE-2011-40445.8 SEM98.0%
——29An unspecified ActiveX control in SVUIGrd.ocx in ARC Informatique PcVue 6.0 through 10.0, FrontVue, and PlantVue allows remote attackers to modify files via calls to unknown methods.125dCVE-2004-0197—98.0%
——29——CVE-2025-342278.8 ALT98.0%
——29Nagios XI < 2026R1 is vulnerable to an authenticated command injection vulnerability within the MongoDB Database, MySQL Query, MySQL Server, Postgres Server, and Postgres Query wizards. It is possible to inject shell characters into arguments provided to the service and execute arbitrary system commands on the underlying host as the `nagios` user.31dCVE-2019-15298—98.0%
——29——CVE-2018-3760—98.0%
——29——CVE-2016-0060—98.0%
——29——CVE-2025-3600—98.0%
——29——CVE-2018-0893—98.0%
——29——CVE-2003-0531—98.0%
——29——CVE-2008-1682—98.0%
——29——CVE-2010-0263—98.0%
——29——CVE-2003-0910—98.0%
——29——CVE-2023-33404—98.0%
——29——CVE-2009-2519—98.0%
——29——CVE-2010-3749—98.0%
——29——CVE-2008-6132—98.0%
——29——CVE-2022-21186—98.0%
——29——CVE-2025-60021—98.0%
——29——CVE-2002-1712—98.0%
——29——CVE-2004-2137—98.0%
——29——CVE-2020-13699—98.0%
——29——CVE-2009-3132—98.0%
——29——CVE-2013-2097—98.0%
——29——CVE-2017-11263—98.0%
——29——